Crowd 2.7 maps groups to crowd so that all directories mapped to the crowd application with the given group can log in. Note that the UI makes this unclear – It will list the group as:

<directory name> - <group name>

when in reality, all directories have access to the group.

Crowd 2.8 fixes this behaviour, so only the listed groups in the listed directories have administration or system administration access to crowd. Unfortunately, this can cause incongruous behaviour when upgrading, as several users who could previously log in as system administrator can no longer do so under Crowd 2.8.

To fix this, when upgrading from Crowd 2.7 to 2.8, all groups in all directories which had practically had access to Crowd administration in 2.7 should explicitly gain access in 2.8. This can later be removed by crowd administrators if desired.